Test ID:	1.3.6.1.4.1.25623.1.0.891809
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-1809-1)
Summary:	The remote host is missing an update for the Debian 'libav' package(s) announced via the DLA-1809-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libav' package(s) announced via the DLA-1809-1 advisory. Vulnerability Insight: Two more security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2018-15822 The flv_write_packet function in libavformat/flvenc.c in libav did not check for an empty audio packet, leading to an assertion failure. CVE-2019-11338 libavcodec/hevcdec.c in libav mishandled detection of duplicate first slices, which allowed remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data. For Debian 8 Jessie, these problems have been fixed in version 6:11.12-1~ deb8u7. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'libav' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-15822 Bugtraq: 20190523 [SECURITY] [DSA 4449-1] ffmpeg security update (Google Search) https://seclists.org/bugtraq/2019/May/60 Debian Security Information: DSA-4449 (Google Search) https://www.debian.org/security/2019/dsa-4449 https://github.com/FFmpeg/FFmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10 https://lists.debian.org/debian-lts-announce/2019/05/msg00043.html https://usn.ubuntu.com/3967-1/ https://usn.ubuntu.com/4431-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-11338 BugTraq ID: 108034 http://www.securityfocus.com/bid/108034 https://github.com/FFmpeg/FFmpeg/commit/54655623a82632e7624714d7b2a3e039dc5faa7e https://github.com/FFmpeg/FFmpeg/commit/9ccc633068c6fe76989f487c8932bd11886ad65b SuSE Security Announcement: openSUSE-SU-2020:0024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.